Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/323830343a346230383a3a2f33322d313238203d3e20323637323739.roa
File:                     323830343a346230383a3a2f33322d313238203d3e20323637323739.roa (raw, json)
Hash identifier:          VHIyfpJW1JJIyxkEwkKdKZ2MzZf8EeppEWNCiq9VtTc=
Subject key identifier:   51:D8:60:B8:2E:E9:9B:31:1B:A4:B2:B8:02:83:B7:AD:F4:F9:76:E3
Certificate issuer:       /CN=0F538A055BDE468027F0DC85B799FCB986F9AB96
Certificate serial:       15C7A51DF7DEAA7B72FDAAD56FA45924895804DF
Authority key identifier: 0F:53:8A:05:5B:DE:46:80:27:F0:DC:85:B7:99:FC:B9:86:F9:AB:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F538A055BDE468027F0DC85B799FCB986F9AB96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/323830343a346230383a3a2f33322d313238203d3e20323637323739.roa
Signing time:             Mon 17 Feb 2025 17:33:12 +0000
ROA not before:           Mon 17 Feb 2025 17:28:12 +0000
ROA not after:            Mon 16 Feb 2026 17:33:12 +0000
asID:                     267279
IP address blocks:        2804:4b08::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c7:a5:1d:f7:de:aa:7b:72:fd:aa:d5:6f:a4:59:24:89:58:04:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F538A055BDE468027F0DC85B799FCB986F9AB96
        Validity
            Not Before: Feb 17 17:28:12 2025 GMT
            Not After : Feb 16 17:33:12 2026 GMT
        Subject: CN=51D860B82EE99B311BA4B2B80283B7ADF4F976E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e9:2b:af:fa:58:7c:41:31:31:38:ba:8f:5a:
                    a9:b2:29:b2:2b:8a:5f:de:1c:fd:07:fd:e3:15:1b:
                    22:ae:5a:1f:4a:06:1f:25:de:b2:01:17:9d:51:79:
                    13:09:71:9b:1b:15:18:e9:05:d4:e6:00:03:47:cd:
                    46:40:f9:56:78:9f:6b:d7:8c:3e:1b:c0:dc:bd:95:
                    61:d8:33:d3:34:ae:74:9d:ae:3f:56:93:00:9c:a5:
                    e0:31:43:6a:51:ab:9b:0e:ea:6a:15:17:66:fc:00:
                    ec:df:49:e4:2a:a1:f8:a8:27:4a:5a:e6:7e:1c:52:
                    42:f9:e6:9d:99:12:59:55:1f:38:cb:d4:27:8e:59:
                    f5:15:fe:63:bd:10:57:97:62:52:79:24:26:a1:03:
                    0c:07:f0:d5:19:7f:9b:22:e7:51:20:3e:77:89:ce:
                    38:dc:19:07:68:e1:d1:c6:32:8c:9e:0e:c1:16:8f:
                    ce:1e:59:53:70:61:3c:3b:39:e9:6c:53:3d:c7:b6:
                    e2:6e:8f:1d:30:fb:2c:e0:2c:f1:8c:e9:9d:14:bc:
                    8b:95:76:6b:5e:35:96:c1:54:85:d1:f4:f9:4a:e7:
                    68:40:5c:46:15:da:02:8e:b7:26:f9:ff:9f:dd:4e:
                    4e:34:34:32:65:2c:0b:cd:52:2e:80:7e:bb:3d:97:
                    45:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D8:60:B8:2E:E9:9B:31:1B:A4:B2:B8:02:83:B7:AD:F4:F9:76:E3
            X509v3 Authority Key Identifier:
                keyid:0F:53:8A:05:5B:DE:46:80:27:F0:DC:85:B7:99:FC:B9:86:F9:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/0F538A055BDE468027F0DC85B799FCB986F9AB96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F538A055BDE468027F0DC85B799FCB986F9AB96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvoFFvbdgBWNXuDr1o7NdJ6eNcoaBThb4qzVP7b29jeF/0/323830343a346230383a3a2f33322d313238203d3e20323637323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b08::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:ed:03:77:43:34:29:0d:0c:87:a8:17:1f:e7:a0:76:2e:
         a2:26:57:9e:7d:dc:da:6f:71:48:9c:12:e2:5a:75:cf:29:fb:
         df:aa:e7:82:a8:f0:76:43:13:75:4d:d9:6f:dc:d4:f7:16:0d:
         c2:39:09:6c:26:2c:dd:e7:ce:2e:34:30:ba:d7:d5:f8:62:f6:
         4f:98:a3:5d:de:5b:32:a6:39:46:df:07:2a:a6:ae:50:ff:3d:
         e8:b2:5d:d2:59:02:54:15:1f:c3:2f:17:ab:ac:3f:d9:e7:25:
         cc:5a:fa:20:08:68:35:fe:2a:29:2b:f9:4c:64:b2:01:de:e1:
         50:a2:c0:ee:78:9e:fe:77:82:09:f9:fc:4a:b5:c6:15:0b:81:
         e1:f5:58:1a:82:29:80:37:e2:d5:ba:c9:81:89:86:04:f5:ad:
         e8:cd:27:c2:b4:68:f8:70:6b:b6:dc:d1:6f:8c:88:65:5a:78:
         2a:80:e4:7f:d9:d7:12:e6:c3:45:3f:42:31:a1:1a:1d:a1:ac:
         6d:f6:fa:08:8e:2b:d9:3e:36:f7:ef:72:3f:b5:c6:0d:09:ac:
         1c:ac:73:5e:ab:42:b6:7b:3e:52:1e:95:8e:4a:5d:25:9c:fa:
         5d:a3:51:62:77:7e:90:d2:4d:27:9c:17:13:00:6f:52:c9:c3:
         27:07:e5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:28 2025 by rpki-client